216.73.217.172

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:37 · Modified 20/12/2025 22:57

Essential information

Value / Name
9dd2425c1a40b8899b2a4ac0a85b047bede642c5dfd3b5a2a2f066a853b49e2d
Confidence
100/100
Revoked
Yes
Valid from
21/12/2022 22:03
Valid until
25/03/2024 22:03
Pattern type
stix
Published
20/12/2025 19:37
Modified
20/12/2025 22:57
Author / Source
AlienVault

Description

ConventionEngine_Term_Desktop

Pattern

[file:hashes.'SHA-256' = '9dd2425c1a40b8899b2a4ac0a85b047bede642c5dfd3b5a2a2f066a853b49e2d']

Labels / Tags

Labels: dridex ducktail excel add-in fin7 formbook masquerading microsoft office phishing social engineering warzone xxl file

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.